The primary function of risk management in an organization is to reduce risk to a level:

A.
where the ARO equals the SLE.

B.
the organization will mitigate.

C.
where the ALE is lower than the SLE.

D.
the organization will accept.